REPO MIGRATED

system/comin.nix

@@ -0,0 +1,11 @@
+{
+  services.comin = {
+    enable = true;
+    remotes = [
+      {
+        name = "origin";
+        url = "https://git.saragerretsen.nl/Hertog/HermitCollective.nix/infra.git";
+      }
+    ];
+  };
+}

system/default.nix

@@ -0,0 +1,9 @@
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./nixos.nix
+    ./packages.nix
+    ./ssh.nix
+    ./comin.nix
+  ];
+}

system/hardware-configuration.nix

@@ -0,0 +1,31 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/94c7af9d-2a39-4ae1-9447-91b1bacec334";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

system/nixos.nix

@@ -0,0 +1,38 @@
+{
+   boot = {
+    loader = {
+      efi.canTouchEfiVariables = true;
+      systemd-boot = {
+        enable = true;
+        editor = false;
+      };
+    };
+  };
+  
+  nix = {
+    settings = {
+      # Enable flakes and new 'nix' command
+      experimental-features = "nix-command flakes";
+      # Deduplicate and optimize nix store
+      auto-optimise-store = true;
+    };
+  };
+
+  nixpkgs.config = {
+    allowUnfree = true;
+  };
+
+  networking = {
+    hostName = "HermitCollective"; 
+    domain = "hermitcollective.net";
+    firewall.allowedTCPPorts = [ 22 80 443 8080 8181 1935 6667 ];
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "hertog@fsfe.org";
+  };
+
+  # Hertog if you are wanting to change this don't oke? thanks
+  system.stateVersion = "23.05";
+}

system/packages.nix

@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+
+{
+  environment = {
+    # Systemwide installed packages
+    systemPackages = with pkgs; [
+      iftop
+      openssl
+      git
+      btop
+      wget
+      zulu
+    ];
+  };
+}
+

system/ssh.nix

@@ -0,0 +1,11 @@
+{  # Enable and configure openssh
+   services.openssh = {
+     enable = true;
+     settings = {
+       PasswordAuthentication = false;
+       PermitRootLogin = "no";
+       X11Forwarding = false;
+     };
+   };
+}
+